Exclusive insights into the latest Threat Intelligence. Keeping constant watch over the cyber and geopolitical landscapes so you don’t have to.
Monthly Threat Intelligence Report
Ransomware gangs recruit malicious insiders as attacks surge over holidays
- Ransomware levels rose for the fourth consecutive month in December 2025, increasing by 13% to total 783 attacks.
- Industrials accounted for 29% of ransomware attacks in December.
- Qilin was responsible for 22% of all attacks in December 2025, with 92 more attacks than its closest follower, Akira.
29 January 2026 – Cyber crime is increasingly operating as an organised industry, with ransomware-as-a-service (RaaS) gangs adopting structured affiliate models and actively recruiting malicious insiders and cyber security professionals. The shift comes as ransomware activity rose by 13% month-on-month in December 2025, alongside growing evidence of professionalisation across the ransomware ecosystem.
Monthly webinar
Our team of Threat Intel experts keep a constant watch over the cyber and geopolitical landscape, so you don’t have to.
Introducing our monthly highlights webinar, giving you further insight and exclusive access to what's going on now. Join our Global Head of Threat Intelligence, Matt Hull, each month for:
- A deeper understanding of the latest report findings
- A look at emerging trends by region and sector
- Insight into new threat actors
- Spotlight on the most impactful active cyber threats
Our next webinar will take place on February 24th 2026, 4pm GMT.
Matt Hull
Global Head of Threat Intelligence
Subscribe to our monthly reports and webinars for the latest on recent and emerging advances in the threat landscape and a deep understanding of the latest Tactics, Techniques and Procedures (TTPs) of threat actors.
Cyber Threat Intelligence report archive
On demand videos
Missed a webinar? Find every past recording in our showcase:
View now
Never miss any intelligence.
Hit the button below to get our monthly reports and highlight webinars straight to your inbox.